Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/5luh6QGtWet75MM3UjaJelTEMp4.mft
File:                     5luh6QGtWet75MM3UjaJelTEMp4.mft (raw, json)
Hash identifier:          IUqkxtRXIWdkAlt61cyW5B9XyNsi/YHy+yHftpJ8yVo=
Subject key identifier:   49:F3:DA:DA:04:9A:81:C9:EC:F0:69:C7:9E:BE:2D:34:7B:25:6D:4F
Authority key identifier: E6:5B:A1:E9:01:AD:59:EB:7B:E4:C3:37:52:36:89:7A:54:C4:32:9E
Certificate issuer:       /CN=e65ba1e901ad59eb7be4c3375236897a54c4329e
Certificate serial:       018316AE5250B30D3D5F0ED9E17585484CCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5luh6QGtWet75MM3UjaJelTEMp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/5luh6QGtWet75MM3UjaJelTEMp4.mft
Manifest number:          068D
Signing time:             Wed 07 Sep 2022 06:41:06 +0000
Manifest this update:     Wed 07 Sep 2022 06:41:06 +0000
Manifest next update:     Thu 08 Sep 2022 06:41:06 +0000
Files and hashes:         1: 5luh6QGtWet75MM3UjaJelTEMp4.crl (hash: LIgoumBlzWGUeVvLhYbESAD3nO1NXgg89/QfJOXpUNs=)
                          2: R6xi-NLfmoHgKEt9P1HuhonVKgw.roa (hash: eM0JpCdaK3y/HnNwwVEVU+w8od2IBLTJHRmaMTl5hdc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:16:ae:52:50:b3:0d:3d:5f:0e:d9:e1:75:85:48:4c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e65ba1e901ad59eb7be4c3375236897a54c4329e
        Validity
            Not Before: Sep  7 06:41:06 2022 GMT
            Not After : Sep  8 06:41:06 2022 GMT
        Subject: CN=49f3dada049a81c9ecf069c79ebe2d347b256d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f2:e8:aa:75:e9:0a:0c:cb:bd:f4:95:1b:e2:
                    84:71:07:89:30:10:dc:4c:03:58:2e:4d:5c:bc:70:
                    28:54:32:4f:d4:fa:e0:99:f9:22:af:ba:1a:fd:00:
                    eb:67:a0:e6:bb:b3:ce:7e:5c:82:f1:c5:bf:1b:c9:
                    79:e2:39:57:cc:4a:1a:5e:4f:18:60:f0:fc:98:0c:
                    1a:38:c9:2c:20:af:5d:3d:e2:70:6a:a6:ad:60:c0:
                    15:b0:a6:a1:94:8d:16:3b:8a:4b:9d:7d:e6:13:d0:
                    16:58:60:cf:7d:54:59:46:50:a4:c1:4b:c6:fc:73:
                    b7:91:c2:e8:db:83:8f:f9:9a:76:60:78:3e:e2:12:
                    5a:60:cf:a2:17:25:16:b1:00:6b:6c:8b:9a:4c:ab:
                    0d:f3:60:70:f6:fa:a0:48:b9:b7:52:3b:bd:64:5b:
                    72:ad:4c:37:c8:7c:32:7b:e7:a7:46:cc:db:e1:cb:
                    8c:28:bd:78:f6:89:9e:9a:d2:ba:1c:df:25:22:b2:
                    5a:f3:3f:09:a1:81:47:04:88:dd:bc:45:8b:02:7d:
                    7f:e7:fe:7f:da:0a:d3:3e:82:4f:f0:6f:a9:0d:52:
                    4e:29:8c:83:cd:9f:5f:6b:34:8f:5e:df:ca:9e:22:
                    03:62:5b:be:a1:77:c5:83:e0:b0:af:44:48:cd:1a:
                    29:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F3:DA:DA:04:9A:81:C9:EC:F0:69:C7:9E:BE:2D:34:7B:25:6D:4F
            X509v3 Authority Key Identifier:
                keyid:E6:5B:A1:E9:01:AD:59:EB:7B:E4:C3:37:52:36:89:7A:54:C4:32:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5luh6QGtWet75MM3UjaJelTEMp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/5luh6QGtWet75MM3UjaJelTEMp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b33eb9-242a-48d9-ac84-f0c48413bc6e/1/5luh6QGtWet75MM3UjaJelTEMp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0e:20:8e:4e:dd:53:37:6d:d7:3f:89:e6:8b:e7:30:85:cd:
         ed:5a:97:61:b7:8a:65:01:f8:f2:b3:bf:e5:14:f2:f7:bf:fc:
         46:ba:91:50:aa:c4:59:90:32:ae:2e:1f:cf:96:82:84:f1:a8:
         61:51:5e:d5:14:d2:bd:c5:89:e2:72:1a:53:4e:1e:e4:6a:69:
         ab:74:ec:24:36:ff:2b:a9:39:5c:d6:31:cc:c5:6c:a8:3a:7c:
         96:99:1b:0e:ae:e8:31:62:57:43:b6:8d:3a:29:05:9d:80:21:
         9b:8e:d0:f1:9d:8e:78:25:6a:5f:4a:01:e7:ef:9c:a4:e7:50:
         b5:2a:5b:5b:40:bd:b8:a9:ea:9c:b2:67:78:c0:b5:a2:a2:06:
         20:f5:d6:71:95:f8:b1:b9:d1:8f:27:a0:a7:06:61:3d:b9:69:
         e5:f8:3d:bb:2d:3d:67:07:05:fb:42:cc:42:bc:ba:17:05:ee:
         85:f7:ea:2b:1e:1f:d3:9c:b9:de:24:0d:78:72:a7:6b:4c:0b:
         9e:ee:c6:cf:20:c9:67:b3:0b:41:06:2e:44:22:ec:80:b5:05:
         f8:64:11:e9:62:e5:8f:a5:d4:43:c8:c7:70:cc:d2:ed:6b:6f:
         9a:d3:51:e4:b0:f5:ca:c2:2e:d2:92:b8:84:f4:fe:ce:fb:62:
         14:e5:42:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYMWrlJQsw09Xw7Z4XWFSEzPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NWJhMWU5MDFhZDU5ZWI3YmU0YzMzNzUyMzY4OTdhNTRj
NDMyOWUwHhcNMjIwOTA3MDY0MTA2WhcNMjIwOTA4MDY0MTA2WjAzMTEwLwYDVQQD
Eyg0OWYzZGFkYTA0OWE4MWM5ZWNmMDY5Yzc5ZWJlMmQzNDdiMjU2ZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/LoqnXpCgzLvfSVG+KEcQeJMBDc
TANYLk1cvHAoVDJP1Prgmfkir7oa/QDrZ6Dmu7POflyC8cW/G8l54jlXzEoaXk8Y
YPD8mAwaOMksIK9dPeJwaqatYMAVsKahlI0WO4pLnX3mE9AWWGDPfVRZRlCkwUvG
/HO3kcLo24OP+Zp2YHg+4hJaYM+iFyUWsQBrbIuaTKsN82Bw9vqgSLm3Uju9ZFty
rUw3yHwye+enRszb4cuMKL149omemtK6HN8lIrJa8z8JoYFHBIjdvEWLAn1/5/5/
2grTPoJP8G+pDVJOKYyDzZ9fazSPXt/KniIDYlu+oXfFg+Cwr0RIzRopBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnz2toEmoHJ7PBpx56+LTR7JW1PMB8GA1UdIwQY
MBaAFOZboekBrVnre+TDN1I2iXpUxDKeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWx1aDZRR3RXZXQ3NU1NM1VqYUplbFRFTXA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iMzNlYjktMjQyYS00OGQ5LWFjODQt
ZjBjNDg0MTNiYzZlLzEvNWx1aDZRR3RXZXQ3NU1NM1VqYUplbFRFTXA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iMzNlYjktMjQyYS00OGQ5LWFjODQtZjBjNDg0MTNiYzZl
LzEvNWx1aDZRR3RXZXQ3NU1NM1VqYUplbFRFTXA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABg4gjk7d
Uzdt1z+J5ovnMIXN7VqXYbeKZQH48rO/5RTy97/8RrqRUKrEWZAyri4fz5aChPGo
YVFe1RTSvcWJ4nIaU04e5Gppq3TsJDb/K6k5XNYxzMVsqDp8lpkbDq7oMWJXQ7aN
OikFnYAhm47Q8Z2OeCVqX0oB5++cpOdQtSpbW0C9uKnqnLJneMC1oqIGIPXWcZX4
sbnRjyegpwZhPblp5fg9uy09ZwcF+0LMQry6FwXuhffqKx4f05y53iQNeHKna0wL
nu7GzyDJZ7MLQQYuRCLsgLUF+GQR6WLlj6XUQ8jHcMzS7WtvmtNR5LD1ysIu0pK4
hPT+zvtiFOVCrQ==
-----END CERTIFICATE-----